High Street Loyal PROGRAMME
Supported by Visa, High Street Loyal is a community loyalty programme (“High Street Loyal", "the Programme", “Programme”) provided by OnKard Technologies Ltd., a UK company that provides merchant-funded rewards and real time mobile marketing platforms.
OnKard Technologies Ltd. ("OnKard") is certified within the Level 1 standards of the Payment Card Industry as managed by the PCI Security Standards Council.
OnKard software systems deliver a Service (“Service”) that allows consumers to register their Visa card and automatically earn and spend their reward points on purchases at participating businesses (“merchants”,“retailers”) in shopping areas in London and the UK.
OnKard Technologies Ltd. as the operator of the Programme, and as the legal entity that contracts with members on one side, and merchants on the other side, is the conduit that contractually binds you and the participating High Street Loyal merchants (“Merchants”) into a “Reward for Purchase” agreement. OnKard provides the High Street Loyal mobile website (the “website”, “Site”) where consumers can register their Visa card for the Service, locate participating merchants, access time sensitive offer information. The Service provides real time electronic notifications to members of rewards and offer recommendations for participating merchants.
The Programme website provides visitors access to exclusive High Street Points offers from our third-party partner retailers ("Retailers"). These offers are earned in-store and do not require members to do anything special at checkout. All members need to do is pay using a registered Visa payment card at a participating retailer. The offer is triggered automatically when the Visa credit, debit or prepaid card used for payment has been registered on the Programme website; with this one-time registration, customers are eligible for earning High Street Points at participating merchants and benefit from all offers published on the website.
Although Programme members can browse through offers on the website before having registered, they must register an eligible Visa payment card on the website’s secure page if they wish to take advantage of the offers.
What data do we collect from you?
We process Personal Data both as a Processor and as a Controller, as defined in the EU General Data Protection Regulation 2016/679 (“GDPR”) and the Data Protection Act 2018.
We process your Personal Data to perform our obligations under the Terms and Conditions applicable to the Programme, provided by us to you, our customer. Our Terms and Conditions are available at https://highstreetloyal.uk.
We may also process your Personal Data if you have consented to specific types of processing activity that go further than providing the Service. You may revoke your consent at any time. Doing so will bar us from further processing of your Personal Data based on your consent but will not impact the lawfulness of processing based on your consent before it was withdrawn.
The core features of our Service are only available based as a contractual necessity once you have completed the registration process to the Service.
We process your Personal Data as needed in compliance with laws and regulations.
We collect at the time of registration to the Programme only data necessary to create individual Programme member accounts and then award High Street Points to specific individual accounts for the purchases made at our partner Retailer locations by registered members. We also collect data necessary to make the Service fully functional and capable of allowing for future profile modifications. The one-time registration and Programme account creation process is simple: We ask for member’s first name and last name, their email address, country of residence and mobile phone number; we then ask members to create a password for future login. Importantly, we ask members to register a Visa credit, debit or prepaid card including the cardholder’s name as it appears on the card, the full card number and the expiry date.
The Programme will never charge the member’s Visa card; the card number is only used to identify qualifying transactions at participating Retailers or to credit the card in the Points redemption process, using state-of-the-art encryption technology.
To login on subsequent visits to the Programme website, members will be asked to provide their email address as identifier and password.
Members can register additional Visa cards or delete registered cards from their profile at any time following their initial registration. Please note that the Programme and OnKard will never request additional card or personal information after a member's initial registration. Please remember that your Points have a monetary value; beware of phishing attempts by third parties, unsolicited emails or calls, and all non-secure forms of communication.
How do we store the data?
When members register with the Programme, our system will create a unique account identifier, and the data collected at registration will be stored under that account ID in our secure PCI-DSS Level-1 certified database. Member data will be linked to this randomly generated unique ID and other encrypted values to allow us to identify qualifying transactions at participating retailers.
In addition, when members register a Visa card with the Programme, OnKard provides members’ card numbers to Visa via the Visa Offer Platform’s secure enrolment service; this allows Visa to identify Programme member transactions at participating merchants in multiple locations, thus providing the Programme with the ability to securely identify more qualifying transactions at more retailers than would otherwise be possible.
Members' Visa payment card number and Personal Data will never leave the OnKard secure database, only the random unique ID(s) and encrypted values will be used to identify transactions and associate them with the respective High Street Loyal account. We will not share any personal information or members' Visa card details with any other third party other than Visa.
After members register their card, all of the retailer offers visible on the Programme website will be automatically linked to their Programme account, allowing them to earn Points from whichever offer they choose. The transaction data we receive from our participating retailers includes the name and location of the retailer, the date and time of the transaction, total value of the transaction, and the transaction ID, which is created as the payment is authorised. We use the merchant data to calculate the High Street Points members will be awarded into their Programme account, based on the merchant offer that was applicable at the time of the purchase. We do not have access to the details of members’ transactions, such as number of items purchased, price per item, or any other detail pertaining to their purchase. The transaction ID is collected by us to allow us to adjust award settlement in the case of returns and refunds, partial or total.
How do we use the data?
We use the information we collect to:
- Identify qualifying purchases at participating retailers
- Create and manage a member’s account and reward them for qualified transactions
- Notify members each time they earn High Street Points
- Provide members with special offers from participating retailers or programme partners
- From time to time, provide members with information about the Programme news
- Operate, analyze and improve our business offering (including developing new types of offers, attracting new retailers and partners, improving the relevance of our communications, determining the effectiveness of our marketing, analyzing our Site and Service, and performing accounting, auditing, billing, and reconciliation.)
- Analyse anonymised transaction data, perform accounting, invoicing, and settlement services for retailers, prepare and furnish aggregated reports to retailers and sponsors of the Programme
- Use of the data in an anonymized aggregated form for our business purposes. For the avoidance of doubt such aggregated data shall not contain any Personal Data
- Comply with applicable legal requirements and industry standards
- Enforce our Terms and Conditions
We communicate with members in near-real time to send them a reward confirmation message by email and SMS following a qualified transaction. When possible, we use this communication opportunity to inform members of offers nearby, i.e. relevant in time and location as determined by the location of the payment terminal used in the qualifying transaction.
We do not sell or disclose any personal information. We do not use members' personal information except as described here in. We will never communicate a member’s name, contact information or other details to the merchants from whom they make a purchase.
On our website, members may choose to use certain features for which we partner with other companies. These features, which include geo-location tools, are operated by third parties, clearly identified as such, and not affiliated with OnKard Technologies Ltd. These third parties may use data such as search and geo-location data in accordance with their own privacy policies. We are not responsible for the privacy practices of third parties and encourage members to read their privacy statements.
Receiving post transaction SMS or e-mail notifications of awards is an intrinsic component of the Programme Service. Members can elect to not receive post transaction notifications only by opting out of the Programme.
We may detect and use information about a member’s computer or smartphone, which may include their IP address, device operating system and browser type. This data is used to optimise the user experience and for system administration and on-going quality enhancement purposes. Cookies are also used to compile statistical data about our users' browsing patterns, but do not identify any individual.
Protecting members’ personal information
The security of members’ personal information is very important to us. We are committed to protecting the information we collect. We maintain appropriate administrative, technical and physical safeguards designed to protect the personal information members provide against accidental, unlawful or unauthorized destruction, loss, alteration, access, disclosure or use. We use SSL (Security through Secure Sockets Layer) encryption when transferring personal information from a web page to an application. In other words, the transfer of data back and forth between a member’s browser and our web server is encrypted. Members can recognize when SSL is active by looking for a closed lock icon that is usually located in the address bar of the web browser.
A member may also request information about the purpose of the processing; the categories of Personal Data concerned; how long it will be stored. Members have a right to correct (rectify) the record of their Personal Data maintained by OnKard if it is inaccurate. Member may request that OnKard erase that data or cease processing it, subject to certain exceptions. Member may also request that OnKard cease using a member’s data for direct marketing purposes. When technically feasible, OnKard will—upon request—provide a member’s Personal data to him.
Accessing member personal information
Members can access their personal information by logging into the “My Account” page on the website. Here members can delete their account, update their email address or mobile number, change their password as well as delete registered Visa cards or register new cards.
OnKard has a “Data Protection Officer” who is responsible for matters relating to privacy and data protection. This Data Protection Officer can be reached at the following address:
OnKard Technologies Ltd, Attn: Data Protection Officer
1-2 Craven Road, London W5 2UA
If members have any questions or comments, or if they would like to access, correct, amend or delete any personal information we have about them, register a complaint, or simply want more information they may contact our Privacy Compliance Officer at firstname.lastname@example.org or reach us by mail at
OnKard Technologies Ltd.
1-2 Craven Road, London W5 2UA
© 2021 Onkard Technologies Ltd. All rights reserved.